neoagent 3.2.1-beta.1 → 3.2.1-beta.10

package/server/services/runtime/guest_image.js

@@ -3,7 +3,7 @@
 const fs = require('fs');
 const path = require('path');
 const crypto = require('crypto');
-const { spawnSync } = require('child_process');
+const { spawn, spawnSync } = require('child_process');
 const { DATA_DIR } = require('../../../runtime/paths');
 const { stageGuestPayload, normalizeRuntimeProfile } = require('./guest_bootstrap');
 
@@ -21,11 +21,12 @@ const BUILD_TIMEOUT_MS = Number(process.env.NEOAGENT_GUEST_IMAGE_BUILD_TIMEOUT_M
 // container start. Copy package.json first so the dependency layer stays cached
 // across source-only changes.
 function dockerfileFor(profile) {
-  if (normalizeRuntimeProfile(profile) === 'android') {
+  const normalizedProfile = normalizeRuntimeProfile(profile);
+  if (normalizedProfile === 'android' || normalizedProfile === 'cli') {
     return [
       `FROM ${BASE_IMAGE}`,
       'ENV NODE_ENV=production',
-      'ENV NEOAGENT_GUEST_PROFILE=android',
+      `ENV NEOAGENT_GUEST_PROFILE=${normalizedProfile}`,
       'WORKDIR /opt/neoagent',
       'COPY package.json ./',
       'RUN npm install --omit=dev --no-audit --no-fund && npm cache clean --force',
@@ -42,7 +43,7 @@ function dockerfileFor(profile) {
     `FROM ${BASE_IMAGE}`,
     'ENV NODE_ENV=production',
     'ENV PLAYWRIGHT_BROWSERS_PATH=/ms-playwright',
-    'ENV NEOAGENT_GUEST_PROFILE=browser_cli',
+    `ENV NEOAGENT_GUEST_PROFILE=${normalizedProfile}`,
     'WORKDIR /opt/neoagent',
     'COPY package.json ./',
     // Install deps without running package postinstall scripts, then fetch the
@@ -104,6 +105,34 @@ function dockerAvailable() {
   return !result.error && result.status === 0;
 }
 
+function runDockerCommand(args, options = {}) {
+  const timeoutMs = Number(options.timeout || BUILD_TIMEOUT_MS);
+  const spawnImpl = options.spawnImpl || spawn;
+  return new Promise((resolve, reject) => {
+    const child = spawnImpl('docker', args, {
+      stdio: options.stdio || ['ignore', 'inherit', 'inherit'],
+      windowsHide: true,
+    });
+    let settled = false;
+    const finish = (error, status = null) => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(timeout);
+      if (error) reject(error);
+      else resolve(status);
+    };
+    const timeout = setTimeout(() => {
+      const error = new Error(`docker ${args[0]} timed out after ${timeoutMs}ms`);
+      error.code = 'DOCKER_COMMAND_TIMEOUT';
+      try { child.kill('SIGKILL'); } catch {}
+      finish(error);
+    }, timeoutMs);
+    timeout.unref?.();
+    child.once('error', (error) => finish(error));
+    child.once('close', (status) => finish(null, status));
+  });
+}
+
 // Builds and caches the per-profile guest-agent Docker image. The image bakes in
 // the guest agent, its dependencies, and (for browser_cli) the Chromium browser,
 // so containers start the agent directly with no runtime installation step.
@@ -165,15 +194,16 @@ class GuestImageBuilder {
   async #build(tag) {
     console.log(`[GuestImage:${this.profile}] Building guest image ${tag} (one-time; downloads browser + deps)…`);
     const started = Date.now();
-    const result = docker(['build', '-t', tag, this.contextDir], {
-      timeout: BUILD_TIMEOUT_MS,
-      stdio: ['ignore', 'inherit', 'inherit'],
-    });
-    if (result.error) {
-      throw new Error(`Guest image build failed to start: ${result.error.message}`);
+    let status;
+    try {
+      status = await runDockerCommand(['build', '-t', tag, this.contextDir], {
+        timeout: BUILD_TIMEOUT_MS,
+      });
+    } catch (error) {
+      throw new Error(`Guest image build failed: ${error.message}`, { cause: error });
     }
-    if (result.status !== 0) {
-      throw new Error(`Guest image build for ${tag} exited with status ${result.status}`);
+    if (status !== 0) {
+      throw new Error(`Guest image build for ${tag} exited with status ${status}`);
     }
     this.#cachedBuiltAt = Date.now();
     console.log(`[GuestImage:${this.profile}] Built ${tag} in ${Math.round((Date.now() - started) / 1000)}s`);
@@ -184,5 +214,6 @@ class GuestImageBuilder {
 module.exports = {
   GuestImageBuilder,
   dockerAvailable,
+  runDockerCommand,
   BASE_IMAGE,
 };

package/server/services/runtime/manager.js

@@ -10,23 +10,36 @@ const { DesktopProvider } = require('../desktop/provider');
 // Resource defaults for Docker VMs (overridable via env).
 const DEFAULT_VM_MEMORY_MB = Number(process.env.NEOAGENT_VM_MEMORY_MB ?? 2048);
 const DEFAULT_VM_CPUS = Number(process.env.NEOAGENT_VM_CPUS ?? 2);
+const DEFAULT_CLI_VM_MEMORY_MB = Number(process.env.NEOAGENT_CLI_VM_MEMORY_MB ?? 1024);
+const DEFAULT_CLI_VM_CPUS = Number(process.env.NEOAGENT_CLI_VM_CPUS ?? 1);
 
 class RuntimeManager {
   constructor(options = {}) {
     this.browserExtensionRegistry = options.browserExtensionRegistry || null;
     this.desktopCompanionRegistry = options.desktopCompanionRegistry || null;
     this.shellWorkerPool = options.shellWorkerPool || null;
+    this.androidControllers = new Map();
 
     const browserVmManager = options.browserVmManager || new DockerVMManager({
-      runtimeProfile: 'browser_cli',
+      runtimeProfile: 'browser',
       memoryMb: DEFAULT_VM_MEMORY_MB,
       cpus: DEFAULT_VM_CPUS,
     });
     this.browserBackend = new LocalVmExecutionBackend({
-      runtimeProfile: 'browser_cli',
+      runtimeProfile: 'browser',
       vmManager: browserVmManager,
       artifactStore: options.artifactStore,
     });
+    const cliVmManager = options.cliVmManager || new DockerVMManager({
+      runtimeProfile: 'cli',
+      memoryMb: DEFAULT_CLI_VM_MEMORY_MB,
+      cpus: DEFAULT_CLI_VM_CPUS,
+    });
+    this.cliBackend = new LocalVmExecutionBackend({
+      runtimeProfile: 'cli',
+      vmManager: cliVmManager,
+      artifactStore: options.artifactStore,
+    });
 
     this.artifactStore = options.artifactStore || null;
 
@@ -44,6 +57,12 @@ class RuntimeManager {
         artifactStore: options.artifactStore,
         userId,
       }));
+
+    this.createAndroidController = options.createAndroidController
+      || ((userId) => new AndroidController({
+        userId,
+        artifactStore: this.artifactStore,
+      }));
   }
 
 
@@ -68,37 +87,73 @@ class RuntimeManager {
     );
   }
 
+  getCapabilitySnapshot(userId) {
+    const settings = this.getSettings(userId) || {};
+    const key = String(userId || '').trim();
+    const extensionConnected = this.hasActiveExtensionBrowser(userId);
+    const androidController = key && this.androidControllers instanceof Map
+      ? this.androidControllers.get(key)
+      : null;
+    let androidStatus = null;
+    if (androidController && typeof androidController.getStatusSync === 'function') {
+      try {
+        androidStatus = androidController.getStatusSync();
+      } catch {
+        androidStatus = null;
+      }
+    }
+
+    return {
+      browser: {
+        preferredBackend: settings.browser_backend,
+        activeBackend: extensionConnected ? 'extension' : 'vm',
+        extensionConnected,
+        vmInitialized: Boolean(
+          this.browserBackend?.vmManager?.hasTrackedVm?.(userId),
+        ),
+      },
+      android: {
+        initialized: Boolean(androidController),
+        status: androidStatus,
+      },
+      desktop: {
+        connected: this.hasActiveDesktopCompanion(userId),
+      },
+    };
+  }
+
   resolveBackend(userId, requested) {
     void userId;
-    void requested;
-    return this.browserBackend;
+    return requested === 'browser' ? this.browserBackend : this.cliBackend;
   }
 
   async executeCommand(userId, command, options = {}) {
-    const backend = this.resolveBackend(userId, 'browser_cli');
+    const backend = this.resolveBackend(userId, 'cli');
     return backend.executeCommand(userId, command, options);
   }
 
   hasVmForUser(userId, capability = 'browser') {
-    return Boolean(this.browserBackend?.vmManager?.hasVm?.(userId));
+    const backend = capability === 'browser' ? this.browserBackend : this.cliBackend;
+    return Boolean(backend?.vmManager?.hasVm?.(userId));
   }
 
   async killCommand(userId, pid, reason = 'aborted') {
-    return this.browserBackend.killCommand(userId, pid, reason);
+    return this.cliBackend.killCommand(userId, pid, reason);
   }
 
   async getCommandExecutorForUser(userId) {
-    return this.browserBackend.getCommandExecutorForUser(userId);
+    return this.cliBackend.getCommandExecutorForUser(userId);
   }
 
-  async getBrowserProviderForUser(userId) {
+  async getBrowserProviderForUser(userId, options = {}) {
     const settings = this.getSettings(userId);
     if (settings.browser_backend === 'extension' && this.hasActiveExtensionBrowser(userId)) {
       return this.getExtensionBrowserProvider(userId, {
         tokenId: settings.browser_extension_token_id,
+        signal: options.signal,
       });
     }
-    return this.browserBackend.getBrowserProviderForUser(userId);
+    return this.browserBackend.getBrowserProviderForUser(userId, options);
   }
 
   async getCliProviderForUser(userId) {
@@ -116,18 +171,12 @@ class RuntimeManager {
         kill: () => Promise.resolve(false),
       };
     }
-    const executor = await this.browserBackend.getCommandExecutorForUser(userId);
+    const executor = await this.cliBackend.getCommandExecutorForUser(userId);
     return { ...executor, backend: 'vm' };
   }
 
   async executeCliCommand(userId, command, options = {}) {
     const provider = await this.getCliProviderForUser(userId);
-    // Route desktop-companion shell commands through the isolated worker pool
-    // when available. The VM (Docker) path is already isolated.
-    if (provider.backend === 'desktop-companion' && this.shellWorkerPool && options.pty !== true) {
-      const result = await this.shellWorkerPool.execute(command, options);
-      return { ...result, backend: 'desktop-companion-worker' };
-    }
     const result = await (options.pty === true && provider.executeInteractive
       ? provider.executeInteractive(command, options.inputs || [], options)
       : provider.execute(command, options));
@@ -146,23 +195,28 @@ class RuntimeManager {
     if (userId == null || String(userId).trim() === '') {
       throw new Error('Android provider requires a user ID.');
     }
-    return new AndroidController({
-      userId: String(userId).trim(),
-      artifactStore: this.artifactStore,
-    });
+    const key = String(userId).trim();
+    if (!this.androidControllers.has(key)) {
+      this.androidControllers.set(key, this.createAndroidController(key));
+    }
+    return this.androidControllers.get(key);
   }
 
   async isGuestAgentReadyForUser(userId, timeoutMs = 1000, capability = 'browser') {
-    if (typeof this.browserBackend?.isGuestAgentReadyForUser !== 'function') {
+    const backend = capability === 'browser' ? this.browserBackend : this.cliBackend;
+    if (typeof backend?.isGuestAgentReadyForUser !== 'function') {
       return false;
     }
-    return this.browserBackend.isGuestAgentReadyForUser(userId, timeoutMs);
+    return backend.isGuestAgentReadyForUser(userId, timeoutMs);
   }
 
   async shutdown() {
     const tasks = [
       this.browserBackend?.shutdown?.(),
+      this.cliBackend?.shutdown?.(),
+      ...Array.from(this.androidControllers.values(), (controller) => controller?.close?.()),
     ];
+    this.androidControllers.clear();
     if (typeof this.shellWorkerPool?.shutdown === 'function') {
       tasks.push(Promise.resolve().then(() => this.shellWorkerPool.shutdown()));
     }

package/server/services/runtime/validation.js

@@ -6,14 +6,14 @@ function getRuntimeValidation(runtimeManager) {
   const policy = getDeploymentPolicy();
   const nodeEnvIsProd = String(process.env.NODE_ENV || '').trim().toLowerCase() === 'prod';
   const browserVmReadiness = runtimeManager?.browserBackend?.vmManager?.getReadiness?.() || null;
-  const vmReadiness = browserVmReadiness || null;
+  const cliVmReadiness = runtimeManager?.cliBackend?.vmManager?.getReadiness?.() || null;
   const issues = [];
 
   if (policy.profile === 'prod' || nodeEnvIsProd) {
-    if (!browserVmReadiness) {
-      issues.push('prod profile requires a working container runtime for browser/CLI.');
-    } else if (!browserVmReadiness.dockerAvailable) {
-      issues.push('prod profile requires Docker to be installed and running for the browser/CLI runtime.');
+    if (!browserVmReadiness || !cliVmReadiness) {
+      issues.push('prod profile requires working isolated container runtimes for browser and CLI.');
+    } else if (!browserVmReadiness.dockerAvailable || !cliVmReadiness.dockerAvailable) {
+      issues.push('prod profile requires Docker to be installed and running for the browser and CLI runtimes.');
     }
   }
 
@@ -21,7 +21,8 @@ function getRuntimeValidation(runtimeManager) {
     ready: issues.length === 0,
     issues,
     vm: {
-      browser: vmReadiness,
+      browser: browserVmReadiness,
+      cli: cliVmReadiness,
       android: null,
     },
     guestTokenConfigured: true,

package/server/services/security/tool_categories.js

@@ -18,6 +18,7 @@ const TOOL_CATEGORIES = {
     'desktop_observe',
   ],
   browser_privileged: ['browser_evaluate'],
+  credential_use: ['credential_fill_browser', 'credential_http_request'],
   network_write: ['http_request'],
   skill_mutation: [
     'create_skill',
@@ -78,6 +79,10 @@ const BUILT_IN_TOOLS = new Set([
   'browser_extract',
   'browser_screenshot',
   'browser_evaluate',
+  'credential_fill_browser',
+  'credential_submit_browser',
+  'credential_cancel_browser',
+  'credential_http_request',
   'desktop_list_devices',
   'desktop_select_device',
   'desktop_observe',
@@ -166,6 +171,7 @@ const DEFAULT_POLICY = {
   android_privileged: 'require_approval',
   desktop_control: 'require_approval',
   browser_privileged: 'require_approval',
+  credential_use: 'require_approval',
   network_write: 'require_approval',
   skill_mutation: 'deny',
   external: 'require_approval',

package/server/services/social_reach/channels/github.js

@@ -28,9 +28,12 @@ class GithubChannel extends SocialReachChannel {
     };
   }
 
-  async read({ url }) {
+  async read({ url, signal }) {
     const { owner, repo } = parseRepoUrl(url);
-    const data = await fetchJson(`https://api.github.com/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}`);
+    const data = await fetchJson(
+      `https://api.github.com/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}`,
+      { signal },
+    );
     return {
       platform: this.id,
       owner,
@@ -47,14 +50,17 @@ class GithubChannel extends SocialReachChannel {
     };
   }
 
-  async search({ query, limit }) {
+  async search({ query, limit, signal }) {
     const q = String(query || '').trim();
     if (!q) {
       const error = new Error('query is required.');
       error.status = 400;
       throw error;
     }
-    const data = await fetchJson(`https://api.github.com/search/repositories?q=${encodeURIComponent(q)}&per_page=${normalizeLimit(limit, 10, 30)}`);
+    const data = await fetchJson(
+      `https://api.github.com/search/repositories?q=${encodeURIComponent(q)}&per_page=${normalizeLimit(limit, 10, 30)}`,
+      { signal },
+    );
     return {
       platform: this.id,
       query: q,

package/server/services/social_reach/channels/reddit.js

@@ -67,8 +67,8 @@ class RedditChannel extends SocialReachChannel {
     };
   }
 
-  async read({ url, limit }) {
-    const data = await fetchJson(postUrlForJson(url));
+  async read({ url, limit, signal }) {
+    const data = await fetchJson(postUrlForJson(url), { signal });
     const post = shapePost(data?.[0]?.data?.children?.[0]);
     const comments = (data?.[1]?.data?.children || [])
       .filter((item) => item?.kind === 't1')
@@ -82,7 +82,7 @@ class RedditChannel extends SocialReachChannel {
     };
   }
 
-  async search({ query, limit }) {
+  async search({ query, limit, signal }) {
     const q = String(query || '').trim();
     if (!q) {
       const error = new Error('query is required.');
@@ -90,7 +90,7 @@ class RedditChannel extends SocialReachChannel {
       throw error;
     }
     const url = `https://www.reddit.com/search.json?q=${encodeURIComponent(q)}&limit=${normalizeLimit(limit, 10, 50)}&raw_json=1`;
-    const data = await fetchJson(url);
+    const data = await fetchJson(url, { signal });
     return {
       platform: this.id,
       query: q,

package/server/services/social_reach/channels/rss.js

@@ -31,9 +31,9 @@ class RssChannel extends SocialReachChannel {
     };
   }
 
-  async read({ url, limit }) {
+  async read({ url, limit, signal }) {
     const parsed = assertHttpUrl(url);
-    const xml = await fetchText(parsed.toString());
+    const xml = await fetchText(parsed.toString(), { publicOnly: true, signal });
     const $ = cheerio.load(xml, { xmlMode: true });
     const entries = $('item, entry').toArray().slice(0, normalizeLimit(limit, 20, 100));
     const title = $('channel > title, feed > title').first().text().trim() || null;

package/server/services/social_reach/channels/social_video.js

@@ -3,6 +3,7 @@
 const { getPlatformDefinition } = require('../platforms');
 const { SocialReachChannel } = require('./base');
 const { normalizeAndDetectPlatform } = require('../../social_video/url');
+const { createAbortError } = require('../../../utils/abort');
 
 const PLATFORM_LABELS = Object.freeze({
   youtube: 'YouTube',
@@ -26,7 +27,7 @@ class SocialVideoReachChannel extends SocialReachChannel {
     }
   }
 
-  async check() {
+  async check({ signal } = {}) {
     if (!this.socialVideoService || typeof this.socialVideoService.getHealthStatus !== 'function') {
       return {
         ...(await super.check()),
@@ -37,11 +38,14 @@ class SocialVideoReachChannel extends SocialReachChannel {
       };
     }
 
-    const health = await this.socialVideoService.getHealthStatus().catch((error) => ({
-      ready: false,
-      dependencies: [],
-      error: error.message || String(error),
-    }));
+    const health = await this.socialVideoService.getHealthStatus({ signal }).catch((error) => {
+      if (signal?.aborted) throw createAbortError(signal);
+      return {
+        ready: false,
+        dependencies: [],
+        error: error.message || String(error),
+      };
+    });
     const missing = (health.dependencies || [])
       .filter((item) => !item.available)
       .map((item) => item.name)
@@ -59,7 +63,7 @@ class SocialVideoReachChannel extends SocialReachChannel {
     };
   }
 
-  async read({ userId, url, include_frame: includeFrame, force_stt: forceStt, agentId }) {
+  async read({ userId, url, include_frame: includeFrame, force_stt: forceStt, agentId, signal }) {
     if (!this.socialVideoService || typeof this.socialVideoService.extractFromUrl !== 'function') {
       const error = new Error('Social video extraction is not connected right now.');
       error.status = 503;
@@ -70,6 +74,7 @@ class SocialVideoReachChannel extends SocialReachChannel {
       includeFrame: includeFrame !== false,
       forceStt: forceStt === true,
       agentId: agentId || null,
+      signal,
     });
     return {
       ...result,

package/server/services/social_reach/channels/v2ex.js

@@ -3,6 +3,7 @@
 const { SocialReachChannel } = require('./base');
 const { getPlatformDefinition } = require('../platforms');
 const { assertHttpUrl, fetchJson, normalizeLimit } = require('../utils');
+const { createAbortError } = require('../../../utils/abort');
 
 function shapeTopic(item = {}) {
   const node = item.node || {};
@@ -33,17 +34,26 @@ class V2exChannel extends SocialReachChannel {
     };
   }
 
-  async read({ url, limit }) {
+  async read({ url, limit, signal }) {
     const parsed = assertHttpUrl(url);
     const match = parsed.pathname.match(/^\/t\/(\d+)/);
     if (!match) {
-      return this.search({ query: parsed.searchParams.get('q') || 'hot', limit });
+      return this.search({ query: parsed.searchParams.get('q') || 'hot', limit, signal });
     }
     const topicId = match[1];
-    const topicData = await fetchJson(`https://www.v2ex.com/api/topics/show.json?id=${encodeURIComponent(topicId)}`);
+    const topicData = await fetchJson(
+      `https://www.v2ex.com/api/topics/show.json?id=${encodeURIComponent(topicId)}`,
+      { signal },
+    );
     const topic = Array.isArray(topicData) ? topicData[0] || {} : topicData || {};
-    const replies = await fetchJson(`https://www.v2ex.com/api/replies/show.json?topic_id=${encodeURIComponent(topicId)}&page=1`)
-      .catch(() => []);
+    const replies = await fetchJson(
+      `https://www.v2ex.com/api/replies/show.json?topic_id=${encodeURIComponent(topicId)}&page=1`,
+      { signal },
+    )
+      .catch((error) => {
+        if (signal?.aborted) throw createAbortError(signal);
+        return [];
+      });
     return {
       platform: this.id,
       ...shapeTopic(topic),
@@ -58,11 +68,14 @@ class V2exChannel extends SocialReachChannel {
     };
   }
 
-  async search({ query, limit }) {
+  async search({ query, limit, signal }) {
     const normalized = String(query || '').trim().toLowerCase();
     const capped = normalizeLimit(limit, 20, 100);
     if (normalized && normalized !== 'hot') {
-      const data = await fetchJson(`https://www.v2ex.com/api/topics/show.json?node_name=${encodeURIComponent(normalized)}&page=1`);
+      const data = await fetchJson(
+        `https://www.v2ex.com/api/topics/show.json?node_name=${encodeURIComponent(normalized)}&page=1`,
+        { signal },
+      );
       return {
         platform: this.id,
         query: normalized,
@@ -70,7 +83,7 @@ class V2exChannel extends SocialReachChannel {
         source: 'v2ex_public_api',
       };
     }
-    const data = await fetchJson('https://www.v2ex.com/api/topics/hot.json');
+    const data = await fetchJson('https://www.v2ex.com/api/topics/hot.json', { signal });
     return {
       platform: this.id,
       query: 'hot',

package/server/services/social_reach/channels/x.js

@@ -43,7 +43,7 @@ class XChannel extends SocialReachChannel {
     };
   }
 
-  async read({ userId, url }) {
+  async read({ userId, url, signal }) {
     const id = extractStatusId(url);
     if (!id) {
       const error = new Error('A public X post URL is required.');
@@ -54,7 +54,7 @@ class XChannel extends SocialReachChannel {
     const source = cookieHeaderForPlatform(userId, this.id) ? 'x_syndication_cookies' : 'x_syndication_public';
     const data = await fetchJson(
       `https://cdn.syndication.twimg.com/tweet-result?id=${encodeURIComponent(id)}&lang=en`,
-      { headers: this.#headers(userId) },
+      { headers: this.#headers(userId), signal },
     );
     return {
       platform: this.id,

package/server/services/social_reach/channels/xueqiu.js

@@ -37,7 +37,7 @@ class XueqiuChannel extends SocialReachChannel {
     };
   }
 
-  async search({ userId, query, limit }) {
+  async search({ userId, query, limit, signal }) {
     const q = String(query || '').trim();
     if (!q) {
       const error = new Error('query is required.');
@@ -45,7 +45,7 @@ class XueqiuChannel extends SocialReachChannel {
       throw error;
     }
     const url = `https://xueqiu.com/stock/search.json?code=${encodeURIComponent(q)}&size=${normalizeLimit(limit, 10, 50)}`;
-    const data = await fetchJson(url, { headers: this.#headers(userId) });
+    const data = await fetchJson(url, { headers: this.#headers(userId), signal });
     return {
       platform: this.id,
       query: q,
@@ -58,12 +58,12 @@ class XueqiuChannel extends SocialReachChannel {
     };
   }
 
-  async read({ userId, symbol, limit }) {
+  async read({ userId, symbol, limit, signal }) {
     const raw = String(symbol || '').trim().toUpperCase();
     if (raw) {
       const data = await fetchJson(
         `https://stock.xueqiu.com/v5/stock/batch/quote.json?symbol=${encodeURIComponent(raw)}`,
-        { headers: this.#headers(userId) },
+        { headers: this.#headers(userId), signal },
       );
       const quote = data.data?.items?.[0]?.quote || {};
       return {
@@ -76,7 +76,7 @@ class XueqiuChannel extends SocialReachChannel {
     }
     const data = await fetchJson(
       'https://xueqiu.com/v4/statuses/public_timeline_by_category.json?since_id=-1&max_id=-1&count=20&category=-1',
-      { headers: this.#headers(userId) },
+      { headers: this.#headers(userId), signal },
     );
     return {
       platform: this.id,

package/server/services/social_reach/service.js

@@ -5,6 +5,7 @@ const { createChannels } = require('./channels');
 const { deleteCookieBundle, getCookieSummary, writeCookieBundle } = require('./store');
 const { domainsForPlatform, getPlatformDefinition, normalizePlatformId } = require('./platforms');
 const { assertHttpUrl } = require('./utils');
+const { createAbortError } = require('../../utils/abort');
 
 const COOKIE_IMPORT_PLATFORMS = new Set(['xueqiu', 'x']);
 const MAX_IMPORTED_COOKIES = 80;
@@ -59,16 +60,17 @@ class SocialReachService {
     return this.channels.find((channel) => channel.canHandleUrl(parsed.toString())) || null;
   }
 
-  async getStatus(userId) {
+  async getStatus(userId, options = {}) {
     const statuses = [];
     for (const channel of this.channels) {
       try {
-        const status = await channel.check({ userId });
+        const status = await channel.check({ userId, signal: options.signal });
         if (!status.cookie && channel.setupKind === 'cookies') {
           status.cookie = getCookieSummary(userId, channel.id);
         }
         statuses.push(status);
       } catch (error) {
+        if (options.signal?.aborted) throw createAbortError(options.signal);
         statuses.push({
           platform: channel.id,
           label: channel.label,
@@ -87,7 +89,7 @@ class SocialReachService {
     };
   }
 
-  async read(userId, args = {}) {
+  async read(userId, args = {}, options = {}) {
     const platform = normalizePlatformId(args.platform || '');
     const channel = platform ? this.getChannel(platform) : this.detectChannelForUrl(args.url);
     if (!channel) {
@@ -97,10 +99,10 @@ class SocialReachService {
       error.status = 400;
       throw error;
     }
-    return channel.read({ ...args, userId });
+    return channel.read({ ...args, userId, signal: options.signal });
   }
 
-  async search(userId, args = {}) {
+  async search(userId, args = {}, options = {}) {
     const platform = normalizePlatformId(args.platform || '');
     const channel = this.getChannel(platform);
     if (!channel) {
@@ -108,7 +110,7 @@ class SocialReachService {
       error.status = 400;
       throw error;
     }
-    return channel.search({ ...args, userId });
+    return channel.search({ ...args, userId, signal: options.signal });
   }
 
   async importCookiesFromExtension(userId, platform, options = {}) {
@@ -132,6 +134,7 @@ class SocialReachService {
     }, {
       tokenId: options.tokenId || null,
       timeoutMs: 15000,
+      signal: options.signal,
     });
     const cookies = sanitizeCookies(response?.cookies || [], domains);
     if (cookies.length === 0) {